To be certain you are protecting the health information in your organization you must identify where it lives and moves about around the network and workforce. A risk analysis can't be done properly without making that list first.

Where should you look for PHI? If you don't store it do you store access TO it? Get more information for this podcast at HelpMeWithHIPAA.com/42